$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4a8ba86a-db72-36f5-afe7-94d542a97c28.roa File: 4a8ba86a-db72-36f5-afe7-94d542a97c28.roa (raw, json) Hash identifier: LNXvRBzpJJkIfOKDTzjidBxpJFXERXl+wZvhfkU+46k= Subject key identifier: AF:42:B7:BE:EE:55:F9:A5:1B:28:61:67:F0:32:B6:46:F7:59:D8:90 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584AA161A28AD3E3ADB5BAA82400 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4a8ba86a-db72-36f5-afe7-94d542a97c28.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 11427 IP address blocks: 67.52.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:a2:8a:d3:e3:ad:b5:ba:a8:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=b58cc3c8-81a2-4db9-8b36-d6cd216cf8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d4:a9:1f:84:93:3d:33:92:48:b0:c6:d9:a4: 32:ac:90:d3:f6:ce:08:df:59:ce:d9:20:10:37:8e: f1:01:05:53:d6:55:a6:c7:06:9f:dc:f5:b4:68:64: 17:f2:b3:e9:4d:90:bf:c6:3d:e1:54:91:e5:20:81: bc:38:b4:e4:d0:6e:5f:11:68:63:87:2a:ea:0c:78: 71:37:8b:59:f8:01:d3:d4:09:a6:95:db:eb:4b:9c: 6b:d0:eb:e0:d0:20:a4:9c:18:25:b0:4c:4b:d7:99: 9a:f8:7b:d3:d4:46:dd:81:88:f8:2b:d9:e6:4d:20: 1a:3c:17:81:1a:34:8c:3f:3c:70:ef:de:8e:7e:a6: a4:e4:f0:06:06:4b:da:91:0d:14:fd:a1:18:f0:28: 78:03:36:f6:45:be:08:ae:a6:e5:91:75:47:f0:54: ca:4d:e5:94:e0:3d:f3:57:68:fb:ae:45:59:01:10: e3:29:4c:9c:90:64:46:45:8d:0c:1c:28:a1:01:26: a9:1b:d5:17:64:0a:18:f8:53:18:06:da:56:47:04: e6:eb:66:89:67:42:ee:1b:b7:ff:cc:77:68:2e:59: 0f:ee:2a:96:89:04:fa:67:af:c0:f0:e2:f3:02:ff: 25:1a:c4:d8:9b:2f:eb:8a:0e:bc:7b:31:ff:44:fd: 55:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:42:B7:BE:EE:55:F9:A5:1B:28:61:67:F0:32:B6:46:F7:59:D8:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4a8ba86a-db72-36f5-afe7-94d542a97c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 67.52.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:95:ec:2e:00:16:5a:50:bc:77:07:0d:51:d5:1d:e0:30:bb: 70:c3:16:c9:33:0b:49:93:95:59:8d:e2:39:2f:09:c5:89:c0: 2d:3a:a7:ee:a6:ce:63:d9:19:2f:07:a6:ba:b5:f8:77:78:e2: 1e:72:ad:f5:bf:bd:3e:cc:5b:a0:9d:8d:84:38:04:5d:db:8d: 90:76:a5:3d:6e:6e:70:7d:8a:c9:37:54:b1:b6:94:4b:56:e2: 4e:31:96:2d:dd:48:07:60:af:07:20:ad:58:15:e6:d7:ab:aa: 31:a6:d1:c4:20:75:0f:15:b1:45:31:29:94:bf:96:1e:1f:48: a4:74:b5:8c:50:39:d3:67:cf:89:9e:23:5f:63:53:5f:5c:76: 1c:4c:b5:64:f4:af:6f:c0:f2:cc:32:2d:cd:f5:c0:43:dc:11: fe:78:4e:df:c2:4f:44:c8:1f:ee:79:ff:74:84:48:1c:cd:c5: d3:1c:68:5e:c1:28:6d:a7:07:de:a5:1e:67:2c:4a:ac:73:f2: 07:61:bf:51:f4:2f:e5:14:16:b5:00:80:d4:f7:97:5c:b6:bf: cb:4c:20:c4:0b:14:84:1e:46:9d:10:54:2d:63:f0:e9:c4:46: 4c:5b:a1:4a:52:37:08:19:0a:18:63:eb:30:32:b3:92:f4:6c: 2b:42:ff:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYaKK0+OttbqoJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk YjU4Y2MzYzgtODFhMi00ZGI5LThiMzYtZDZjZDIxNmNmOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdSpH4STPTOSSLDG2aQyrJDT9s4I31nO2SAQ N47xAQVT1lWmxwaf3PW0aGQX8rPpTZC/xj3hVJHlIIG8OLTk0G5fEWhjhyrqDHhx N4tZ+AHT1AmmldvrS5xr0Ovg0CCknBglsExL15ma+HvT1EbdgYj4K9nmTSAaPBeB GjSMPzxw796Ofqak5PAGBkvakQ0U/aEY8Ch4Azb2Rb4IrqblkXVH8FTKTeWU4D3z V2j7rkVZARDjKUyckGRGRY0MHCihASapG9UXZAoY+FMYBtpWRwTm62aJZ0LuG7f/ zHdoLlkP7iqWiQT6Z6/A8OLzAv8lGsTYmy/rig68ezH/RP1VMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9Ct77uVfmlGyhhZ/Aytkb3WdiQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNGE4YmE4NmEtZGI3Mi0z NmY1LWFmZTctOTRkNTQyYTk3YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQzTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqV7C4AFlpQvHcHDVHVHeAwu3DDFskzC0mTlVmN4jkvCcWJwC06p+6m zmPZGS8Hprq1+Hd44h5yrfW/vT7MW6CdjYQ4BF3bjZB2pT1ubnB9isk3VLG2lEtW 4k4xli3dSAdgrwcgrVgV5terqjGm0cQgdQ8VsUUxKZS/lh4fSKR0tYxQOdNnz4me I19jU19cdhxMtWT0r2/A8swyLc31wEPcEf54Tt/CT0TIH+55/3SESBzNxdMcaF7B KG2nB96lHmcsSqxz8gdhv1H0L+UUFrUAgNT3l1y2v8tMIMQLFIQeRp0QVC1j8OnE RkxboUpSNwgZChhj6zAys5L0bCtC/1A= -----END CERTIFICATE-----Generated at Mon Aug 4 15:31:05 2025 by rpki-client